The organisational guidelines for computer misuse is mainly identified under the Computer Misuse Act. This outlines the illegal acts that can be achieved over the internet like hacking into someones data, purposefully spreading of malicious software and gaining unauthorized access to a device. This is what all organisations need to abide by.

For example, with security SLA at the organization level, every employee needs to create passwords of 8 characters and must change it every thirty days—or every employee needs to have an access card with an imprinted photograph.

2. Customer level: Those issues specific to a customer can be dealt with.

Security requirements of one or more departments within the organization are higher. For example, the financial department needs higher security measures by virtue of its crucial role and handling of financial resources.

3. Service Level: All issues relevant to a specific service (in relation to the customer) can be covered.

Applies to all customers that contract the same service. For example, contracting IT support services for everyone who uses a particular IP telephony provider.

Using a multi-level structure for a large organization reduces the duplication of effort while still providing customization for customers and services. Therefore, corporate level SLAs apply to everybody and every department in that organization; customer level SLAs apply to the department, and so on.

Let’s use another example. Say we are a beverages provider, with tea, coffee, and juices in our service portfolio. If customer A wants a tea to be provided every morning and evening, coffee before and after lunch, and juices during lunch hours, that’s the customer-specific SLA we have signed with that particular customer and that’s how we price the offering.

On the other hand, if we also have a stand where we offer juices throughout the day but at fixed prices and where customers B and C can source their needs, this is a service-based SLA.

CONFIDENTIALITY POLICY

This policy is applicable to all programmes within the School of Health portfolio. For the purpose of this document the term ‘service user’ is used to denote anyone in receipt of health and social care. Ensuring confidentiality is not just good practice; it is a right owed to all individuals and is central to the maintenance of trust between professional and service user. They have the legitimate expectation that students will respect their privacy and act appropriately.

Service Users:

In keeping with the above principles it is required that any written, or other such work such as photographs, videos submitted by students as part of their study must protect service user identity. In order to ensure this any work must not refer to:

H:/Documents/admin resource/Donna Bray/SoH/Breach of Confidentiality Policy

should be numbered, e.g. 1, 2, 3 and so on. Placement areas should be described in generic terms e.g. “In-patient Medical Ward”, “Voluntary Organisation for Young People”.

Mentors and Practice Teachers are an important part of the assessment process and must demonstrate good practice when assessing all portfolio evidence. They must not accept evidence which has breached confidentiality and must also ensure that all documentation they sign and complete complies with the advice given in this policy (they should not specifically name the clinical/placement area and must ensure no breach has occurred at any stage of the assessment process).

Mentors/Practice Teachers should seek advice from the Practice Teams at the University if they need help and support with implementing this policy.

It is important to recognise that all students are in a learning situation, formative feedback is an essential part of advising and supporting students to comply with good practice.

Breach of Confidentiality

Students are introduced to professional codes at the beginning of their programmes and discuss the value base of the profession they wish to enter. Part of this explores the importance of maintaining confidentiality, particularly in relation to individuals/service users, but also organisations and services.

They are required to sign a declaration on enrolment (and re-enrolment) that they will not breach confidentiality as this may result in either invoking the Fitness to Practice or Academic Misconduct procedure.

As a guide, when marking assignments, viewing posters or moderating practice documents, academic staff must firstly recognise any breach of confidentiality (BofC). If a BofC is detected this must be highlighted with the feedback given to the student. The student should be informed that the work has been referred to the Senior Academic Misconduct Officer (SAMO) to determine the nature of the penalty.

If the SAMO decides a breach has occurred and this is the FIRST occasion (irrespective of the year of the student) then a written warning will be given. If a student is referred to the SAMO a second time and the SAMO decides a further breach has occurred, the student’s work will be downgraded to a D-.

If the work is only at a D-, the student will receive an F- and will have to follow the same process as if they had failed the module or practice placement. All work resubmitted will be capped at D-.

These penalties will apply irrespective of whether the breach is contained within the main text of the assignment or is in appendices.

H:/Documents/admin resource/Donna Bray/SoH/Breach of Confidentiality Policy

Students who are suspected of breaching on a third occasion will be referred to the SAMO and should, if they have breached, automatically receive an F-. They will have to follow the same process as if they had failed the module or practice placement. They will then also be referred to the Academic Office and the Associate Dean (Quality) under the Fitness to Practice Policy.

Additional Guidance regarding Social Networking Sites

All students on professional courses should receive advice and guidance on how to use social networking sites in a manner which will not place them at risk of either breaching or being vulnerable to breaching confidentiality.

Students should be made aware that any statements made about the University or partner NHS organisations could place them in breach of the Fitness to Practice, Fitness to Study Policy. All students should be mindful of NHS Trust policy statements on the use of social networking sites and recognise that they should comply with any guidance issued in any work place areas.

Students should be mindful of using social networking to discuss any issues relating to working as a student on a professional course, even if access to their pages is limited to their own student groups or members of their family, information could still be placed in the public domain intentionally or unintentionally and confidentiality could be breached.

Implementation